You can exchange it for a longer-lived token while it's still active, but once it expires it stops working and you'll need to wait for the user to return to your app and get a new access token for them